Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          2eMkgYuNVs59xCKTnMLtp6KMONfPadYx6nNQG1xkaBI=
Subject key identifier:   4C:ED:5D:2E:6B:C1:E1:F1:C3:1F:23:58:57:B8:51:29:57:30:7A:67
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       01A189E51DDF5F0BEF20974890159936B7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          02CC
Signing time:             Thu 29 Oct 2026 23:00:56 +0000
Manifest this update:     Thu 29 Oct 2026 23:00:56 +0000
Manifest next update:     Fri 30 Oct 2026 23:00:56 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: k/Za56LaOCuhq/pPcAuM0B9/13rDAnG/9awDC1YQMPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:e5:1d:df:5f:0b:ef:20:97:48:90:15:99:36:b7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Oct 29 23:00:56 2026 GMT
            Not After : Oct 30 23:00:56 2026 GMT
        Subject: CN=4ced5d2e6bc1e1f1c31f235857b8512957307a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:69:9a:d5:e6:0c:cd:89:c6:ef:a2:a2:c6:
                    79:a6:35:36:43:7d:34:79:62:a7:14:91:7a:38:b3:
                    32:9b:de:74:0b:d9:6f:74:90:76:e7:88:93:13:b8:
                    e6:f6:47:f2:d8:45:e7:7a:b5:e2:66:62:0b:39:82:
                    6d:43:41:af:79:24:76:dc:3e:87:85:42:4e:0d:f7:
                    2e:d3:95:41:1c:a6:f6:a6:fa:39:3e:f3:48:b3:e7:
                    68:0a:3d:6e:1b:00:4d:41:35:0a:4f:e1:f3:b3:1e:
                    44:72:7a:e6:13:73:41:47:8d:f4:05:1a:57:15:47:
                    73:29:25:ac:4e:db:0b:1d:40:e1:54:ab:c2:2a:77:
                    55:72:b9:b7:ee:27:43:8b:cb:bc:85:bb:35:9c:0d:
                    a2:27:5a:be:e0:77:f7:5d:f5:3f:9e:ca:e2:d6:7a:
                    0e:75:75:33:19:1e:1a:29:29:1d:ed:8e:c8:2e:8b:
                    59:8a:6b:64:d2:de:a2:7d:b4:31:1c:3f:3a:f3:22:
                    63:48:26:bf:35:ee:21:89:9e:97:4d:00:73:f5:54:
                    77:d8:87:0e:61:78:ee:fe:17:9c:31:d6:54:4e:b4:
                    7b:5b:1a:ac:65:de:62:fa:f7:a0:76:af:dc:24:7d:
                    b6:b9:0e:47:a4:c6:a2:43:0a:85:e1:a4:be:66:dd:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:5D:2E:6B:C1:E1:F1:C3:1F:23:58:57:B8:51:29:57:30:7A:67
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:e7:f3:c5:49:7d:f6:f6:52:17:17:59:c4:66:ef:96:a8:
         d2:81:34:27:54:32:49:08:7b:4e:c5:3f:fe:e6:bc:a7:4b:c7:
         e4:3a:9a:9e:38:12:f6:07:b9:c6:74:36:df:b6:45:1a:4f:e6:
         df:2e:fd:61:7a:a0:47:67:39:58:48:80:f9:5a:71:ee:7a:d3:
         d1:ea:f3:81:c6:72:79:dd:84:22:cb:c3:b7:44:5a:21:dc:08:
         31:f5:57:95:9a:79:c8:4b:ed:c2:54:81:a0:b4:9d:7c:ec:1c:
         a4:48:8e:e9:db:f1:c0:6c:d0:f5:9b:08:f0:3f:29:62:b3:8b:
         3e:75:56:19:af:fc:c6:f7:8d:a0:7c:0a:43:97:3d:44:83:a8:
         a6:7e:49:e5:75:15:3a:f1:9b:cc:6b:4b:ca:f6:c0:73:60:c2:
         0e:91:72:13:7a:37:0b:b2:00:04:93:d1:91:b4:1d:70:25:aa:
         22:21:e8:2e:e1:3f:56:10:9d:68:b4:45:02:0a:d5:59:07:64:
         2c:82:96:1c:05:ae:cf:e2:86:12:95:c4:2c:ed:09:8c:d8:1c:
         65:15:8c:3d:4c:df:e6:44:8e:a0:0a:5e:cd:0d:f9:22:9b:13:
         fb:77:46:3e:f7:a2:42:1d:82:9d:05:c6:74:d2:69:32:40:70:
         a4:11:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:42 2026 by rpki-client